Security Engineer III

JOB SUMMARY

The Security Engineer III role is part of the Enterprise Security Services (ESS) team in the Information Technology Department. This is an active role that involves maintaining the enterprise security defenses, responding to incidents as needed, and coordination with technology vendors to ensure the implemented solutions operate within Trellis' risk management framework. This role is responsible for designing, building, testing, and implementing security systems within the Trellis IT network. The Security Engineer IV will understand complex IT systems and apply industry best security practices to secure Trellis information resources.

The role is Hybrid Remote/On-Site with occasional onsite presence required.

ESSENTIAL DUTIES AND RESPONSIBILITIES

This role is expected to perform the following essential duties and responsibilities of the position with reasonable accommodation.

• Supports setting technology strategy in conjunction with software engineering, existing infrastructure, and future business needs.
• Oversees and runs the Trellis Security Operations Center (SOC) functions.
• Conducts root-cause analysis and incident reviews.
• Monitors and responds to system security alerts.
• Creates and tunes detection rules, leads threat hunts.
• Analyzes system security logs across a diverse ecosystem (proxy, operating systems, internally developed web apps, software-as-a-service apps (SaaS), and cloud infrastructure) utilizing a Security Information and Event Management (SIEM).
• Works with IT management to improve operational efficiency and effectiveness.
• Conducts research and case studies on leading edge technologies and makes determinations on the suitability for use in the Trellis environment.
• Automates phishing defenses, network device security configurations, and baseline compliance.
• Responds to and resolves security tickets.
• Develops, executes, and tracks the performance of security measures to Trellis information resources.
• Identifies, defines, and documents system security requirements and recommends solutions to management.
• Advises Information Security Officer (ISO) on policy and procedural recommendations, incident courses of action, technology considerations, security budget recommendations, and daily information security issues.
• Performs software updates for security infrastructure devices.
• Acts as a good steward of Trellis' resources to ensure control of IT budgets.
• Supports information technology management in establishing Trellis' technical vision and supports all aspects of the company's technological development.
• Provides support to incident response, suspicious email analysis, disaster recovery, audit artifact generation, information/technology risk assessments, and security configuration as well as procedural recommendations for Trellis IT projects.
• Provide technical assistance to IT staff in defining and implementing appropriate hardware, software, and process to meet information asset protection requirements.
• Performs periodic security reviews and reports non-compliant activities or configurations for investigation and corrective action.

• Supports modernization of information security, process improvement, and IT governance
• Must be available to work flexible hours.
• Interacts with all levels of managements as necessary.
• Contributes to the development of strategic initiatives.
• Assists with special projects as assigned.
• All other duties and responsibilities as assigned.

• Strong reliance on sound, independent professional and technical judgment. Decisions and recommendations will significantly affect both internal and external customers.
• Ability to make technology agnostic recommendations on ways to improve system security and close identified technology or procedural gaps.
• Demonstrated in-depth understanding of information technology concepts and trends.
• Excellent verbal and written communication skills.
• Demonstrated ability to communicate functional and technical topics at multiple levels within organization.
• Ability to independently research complex technical information.
• Strong interpersonal and team building skills when interacting with internal and external customers.
• Proficiency in networking technologies, network security and network monitoring solutions.
• Ability to quickly learn and apply new ideas and materials.
• Ability to communicate clearly and concisely, both verbally and in writing, in a courteous and polite manner.
• Ability to simultaneously handle several concurrent activities.
• Proven ability to apply modern technology to complex problems.
• Experienced with modern security technology and concepts.
• Self-motivated and able to socialize ideas as well as mentor others.

• Bachelor's degree in computer science, information systems, or related field. Experience beyond the minimum work experience requirement can be substituted on a year-for-year basis.
• CISSP or similar certification.

• Additional Information Security certifications are a plus.
• Relevant vendor-specific certifications are a plus.

• Five (5) years of progressively responsible experience in a medium to large enterprise involving large scale distributed and technically diverse environments.
• Five (5) years working with infrastructure hardware, firmware, and software, including Cisco and Dell. [CP1] [SB2]

• Platforms such as:
  1. VMWare, AWS, Azure, O365
  2. Fortinet, Cisco, TrendMicro, Darktrace
  3. Tenable Nessus vulnerability management products
• Windows operating systems with a focus on Security.
• Encryption technologies.
• Threat detection and hunting.
• Cloud Applications Security, Active Directory, SIEM.
• Top Secret CA and Mainframe security.
• RBAC and ICAM technologies.
• Experience with multi-tenant cloud architectures.
• Familiarity with NIST 800-53 controls and RMF, CIS Best Practices.

• Occasionally must move about inside the office.
• Repetitive motion. Regularly operates a computer, phone, and general office equipment.
• Regularly required to handle, feel, grasp objects, and reach across a work area.
• Regularly communicates with other employees and on the phone, virtually, or in person with clients. Regularly converses with internal and external contacts.
• Visual acuity. Regularly must have close visual acuity to view and enter information into computer and software systems, analyze data, develop presentations and reports, and other materials.
• Mental focus. Requires worker to maintain focus and exchange detailed and accurate information through oral and written communication.

• Wor.